CVE-2026-54603 | ruby-oauth oauth2 up to 2.0.21 Client OAuth2::Client#request redirect

July 28, 2026 Yanac

A vulnerability was found in ruby-oauth oauth2 up to 2.0.21. It has been classified as problematic. Impacted is the function OAuth2::Client#request of the component Client. The manipulation leads to open redirect.

This vulnerability is uniquely identified as CVE-2026-54603. The attack is possible to be carried out remotely. No exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More